1.3 Explain the Concept of Zero Trust and Define Its Key Principles CYBERSECURITY-PRACTITIONER Practice Questions (Page 1)

Questions 1–5

1. 1expert · medium

   A company is implementing Zero Trust. The security team wants to ensure that users have only the access they need to perform their jobs. Which approach best achieves this goal?

   • AGrant users access based on their seniority in the company.
   • BGrant all users the same level of access to simplify management.
   • CGrant users access to all resources and rely on auditing to detect misuse.
   • DReview and adjust user permissions regularly to match current job responsibilities.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of least privilege access enforcement?

   • ATo provide users with temporary access to all resources during emergencies
   • BTo give all users the same level of access to simplify management
   • CTo limit user permissions to only what is necessary for their job role
   • DTo grant permissions based on seniority rather than job function
   Reveal Solution Discussion Select an answer first
4. 3expert · medium

   A company has implemented Zero Trust. A user's account is compromised, but the attacker is unable to access sensitive data because the account only has permissions for non-sensitive files. Additionally, the security team detects the compromise through unusual behavior and revokes the account. Which two Zero Trust principles are most directly demonstrated?

   • ABreach assumption and network segmentation
   • BContinuous monitoring and breach assumption
   • CLeast privilege and continuous monitoring
   • DLeast privilege and breach assumption
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is moving from a traditional perimeter-based security model to a Zero Trust architecture. The security team wants to ensure that every access request—regardless of whether it originates from inside or outside the corporate network—is treated with the same level of scrutiny. Which approach best aligns with the Zero Trust model?

   • AApply stricter security controls only to external users and allow internal users to access resources freely.
   • BGrant access based on the user's role and verify each request with multi-factor authentication and device posture checks.
   • CRely on the firewall to block malicious traffic and assume that internal users are safe.
   • DTrust users who are connected via VPN because they have already authenticated to the corporate network.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An organization is adopting Zero Trust. The security team wants to ensure that if a user's account is compromised, the attacker cannot easily access sensitive data across the entire network. Which combination of controls best achieves this goal?

   • AImplement least privilege access and segment the network to limit lateral movement.
   • BMonitor user activity and alert on unusual behavior.
   • CUse multi-factor authentication and encrypt all data at rest.
   • DDeploy a strong firewall and require complex passwords.
   Reveal Solution Discussion Select an answer first